Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/THZGRo10wjMlm6DbRUy7KjrwfkM.roa
File: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (raw, json)
Hash identifier: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=
Subject key identifier: 4C:76:46:46:8D:74:C2:33:25:9B:A0:DB:45:4C:BB:2A:3A:F0:7E:43
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 01957FFECDA85729C1A397BD7829607D805E
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/THZGRo10wjMlm6DbRUy7KjrwfkM.roa
Signing time: Mon 10 Mar 2025 12:19:19 +0000
ROA not before: Mon 10 Mar 2025 12:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50214
IP address blocks: 178.171.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:fe:cd:a8:57:29:c1:a3:97:bd:78:29:60:7d:80:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Mar 10 12:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c7646468d74c233259ba0db454cbb2a3af07e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:60:b0:d9:81:c9:a8:87:b0:cf:b2:4e:b7:
ee:0d:d0:de:51:73:38:b7:a6:24:99:55:fd:47:2d:
56:a7:2d:74:cc:48:c9:80:bf:a2:92:c9:d1:66:81:
a1:bd:77:b3:85:ea:27:38:75:df:97:df:3d:19:9f:
68:ed:67:45:b1:f9:4c:ea:32:37:d7:63:01:fd:8d:
c9:a3:f0:52:c0:d0:66:fa:f5:7e:a3:9f:61:db:07:
e5:c8:e8:a6:6d:d8:07:77:4e:ea:bd:90:ff:a3:5b:
ba:9a:39:dc:23:0e:8f:86:a9:e4:88:29:44:c6:08:
df:37:57:5f:8d:6f:72:47:36:0e:b7:5d:c3:c1:44:
b6:07:6c:f1:db:93:63:17:e3:56:34:40:99:08:87:
e7:53:6c:b6:b1:4b:33:b8:a3:d3:d3:ea:f3:8d:8c:
e0:34:d2:83:c1:27:b7:fb:d1:3e:5f:12:ac:53:ef:
ff:e5:c9:dd:bd:82:d0:ce:b9:12:0f:e9:5d:24:06:
91:fd:de:80:8d:75:8e:83:ef:85:b6:c7:bb:3d:83:
88:6a:23:57:ee:e2:2e:d9:d6:9e:fa:d6:2e:a2:71:
78:68:13:cd:48:da:4c:76:42:13:96:90:60:b9:5e:
96:4d:be:83:4b:4c:e4:b5:85:ed:c6:e1:30:f0:e0:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:46:46:8D:74:C2:33:25:9B:A0:DB:45:4C:BB:2A:3A:F0:7E:43
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/THZGRo10wjMlm6DbRUy7KjrwfkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.171.122.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7a:5b:63:3f:f8:53:fa:4f:9c:eb:6c:04:c9:d9:2b:85:58:
41:5f:e6:22:26:02:09:7d:65:96:e0:8a:1c:11:70:db:5a:34:
1c:f7:c0:9c:64:d0:d6:2e:fa:f1:99:53:ef:02:8d:ee:f8:fc:
e0:e1:04:b5:fd:50:a6:98:14:20:4b:c5:5d:5c:57:9f:d2:59:
9d:35:7c:55:6f:61:3e:ea:7a:21:9b:c9:85:55:4a:49:43:98:
23:ed:80:93:1c:aa:51:e1:48:d0:7c:f4:90:12:b4:92:b2:f2:
0c:5e:98:a6:17:24:80:12:b3:c7:cd:8d:ea:03:fa:d4:e2:70:
d5:cd:ce:97:32:1b:a1:c1:b3:9b:72:26:40:9a:a6:a7:20:3d:
6e:be:e9:69:3c:e4:36:98:f3:bc:4d:de:35:73:84:9a:50:57:
3f:ea:35:af:ec:91:07:fc:2b:6a:7f:0d:3b:27:ec:3c:12:97:
39:fb:1e:95:62:33:6a:1d:d1:bc:42:cb:0d:a7:7c:8d:d2:4c:
ea:09:32:ae:69:45:47:61:df:29:e9:1c:3b:cd:6f:54:9c:ff:
f8:c1:d9:9e:20:c7:3e:0a:bd:bd:93:43:f7:ee:1d:d5:97:46:
8c:6b:bb:d7:8b:86:54:39:d2:6d:9e:6a:87:45:00:16:c3:ad:
16:01:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:08 2025 by rpki-client